Create tags on GitHub using API

To allow for signed tags to be created,
rather than use the git CLI to push tags,
manually push each tag using the GitHub API,
which will sign the tag using the built-in GitHub GPG key.

Author: s0

src/gitUtils.ts

@@ -29,10 +29,6 @@ export const push = async (
   );
 };
 
-export const pushTags = async () => {
-  await exec("git", ["push", "origin", "--tags"]);
-};
-
 export const switchToMaybeExistingBranch = async (branch: string) => {
   let { stderr } = await getExecOutput("git", ["checkout", branch], {
     ignoreReturnCode: true,

src/run.ts

@@ -130,8 +130,6 @@ export async function runPublish({
     { cwd }
   );
 
-  await gitUtils.pushTags();
-
   let { packages, tool } = await getPackages(cwd);
   let releasedPackages: Package[] = [];
 
@@ -157,12 +155,19 @@ export async function runPublish({
 
     if (createGithubReleases) {
       await Promise.all(
-        releasedPackages.map((pkg) =>
-          createRelease(octokit, {
-            pkg,
-            tagName: `${pkg.packageJson.name}@${pkg.packageJson.version}`,
-          })
-        )
+        releasedPackages.map(async (pkg) => {
+          const tagName = `${pkg.packageJson.name}@${pkg.packageJson.version}`;
+          // Tag will only be created locally,
+          // Create it using the GitHub API so it's signed.
+          await octokit.rest.git.createRef({
+            ...github.context.repo,
+            ref: `refs/tags/${tagName}`,
+            sha: github.context.sha,
+          });
+          if (createGithubReleases) {
+            await createRelease(octokit, { pkg, tagName });
+          }
+        })
       );
     }
   } else {
@@ -180,11 +185,16 @@ export async function runPublish({
 
       if (match) {
         releasedPackages.push(pkg);
+        const tagName = `v${pkg.packageJson.version}`;
+        // Tag will only be created locally,
+        // Create it using the GitHub API so it's signed.
+        await octokit.rest.git.createRef({
+          ...github.context.repo,
+          ref: `refs/tags/${tagName}`,
+          sha: github.context.sha,
+        });
         if (createGithubReleases) {
-          await createRelease(octokit, {
-            pkg,
-            tagName: `v${pkg.packageJson.version}`,
-          });
+          await createRelease(octokit, { pkg, tagName });
         }
         break;
       }